Mastering Linux Security and Hardening - Second Edition

Hands-on lab – installing and updating Rootkit Hunter

For Ubuntu, Rootkit Hunter is in the normal repository. For CentOS, you'll need to install the EPEL repository, as I showed you how to do in Chapter 1, Running Linux in a Virtual Environment. For both Linux distros, the package name is rkhunter. Let's get started:

1. Use one of the following commands to install Rootkit Hunter, as appropriate. For Ubuntu, do the following:

sudo apt install rkhunter

For CentOS 7, do the following:

sudo yum install rkhunter

For CentOS 8, do the following:

sudo dnf install rkhunter

2. After it's been installed, you can look at its options with the following command:

man rkhunter

3. The next thing you'll need to do is update the rootkit signatures using the --update ...